@aws-cdk/aws-bedrock-agentcore-alpha/agentcore/gateway/perms.d.ts

The CDK Construct Library for Amazon Bedrock

export declare namespace GatewayPerms {
    /******************************************************************************
     * Data Plane Permissions
     *****************************************************************************/
    /**
     * Permissions to invoke the gateway
     * Used by agents or other services that need to call the gateway
     */
    const INVOKE_PERMS: string[];
    /******************************************************************************
     * Execution Role Permissions
     *****************************************************************************/
    /**
     * KMS permissions for encryption
     * Required when using KMS keys for encryption
     */
    const KMS_KEY_PERMS: string[];
    /**
     * Assume role permission
     * Required for the gateway service to assume the execution role
     */
    const ASSUME_ROLE: string[];
    /**
     * Outbound auth - Workload identity permissions
     * Used to obtain access tokens for workload identity
     */
    const GATEWAY_WORKLOAD_IDENTITY_PERMS: string[];
    /**
     * Outbound auth - OAuth permissions
     * Used to obtain OAuth tokens for target authentication
     */
    const GATEWAY_OAUTH_PERMS: string[];
    /**
     * Outbound auth - API Key permissions
     * Used to retrieve API keys for target authentication
     */
    const GATEWAY_API_KEY_PERMS: string[];
    /**
     * Secrets Manager permissions
     * Required for storing and retrieving API keys and OAuth credentials
     */
    const SECRETS_PERMS: string[];
    /******************************************************************************
     * Control Plane Permissions
     *****************************************************************************/
    /**
     * Get permissions for gateway resources
     */
    const GET_PERMS: string[];
    /**
     * List permissions for gateway resources
     */
    const LIST_PERMS: string[];
    /**
     * Create permissions for gateway resources
     */
    const CREATE_PERMS: string[];
    /**
     * Update permissions for gateway resources
     */
    const UPDATE_PERMS: string[];
    /**
     * Delete permissions for gateway resources
     */
    const DELETE_PERMS: string[];
    /**
     * Combined manage permissions (create, update, delete)
     */
    const MANAGE_PERMS: string[];
    /**
     * Synchronization permissions for MCP server targets
     * Used to refresh tool catalogs when MCP server tools change
     */
    const SYNC_PERMS: string[];
}